{"id":"CVE-2026-1819","aliases":["EUVD-2026-5429","GHSA-7cff-f24g-qx9x"],"status":"published","title":"Stored XSS in Karel Electronics' ViPort","description":"Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Karel Electronics Industry and Trade Inc. ViPort allows Stored XSS.\n\nThis issue affects ViPort: through 23012026.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00383,"percentile":0.32777,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2026-02-04T07:52:23Z","modified":"2026-06-17T10:16:33Z","products":[{"vendor":"karel electronics industry and trade inc.","product":"viport"}],"references":[{"url":"https://www.usom.gov.tr/bildirim/tr-26-0017","tags":["government-resource","broken-link"]},{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0017","tags":["government-resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-1819"},{"url":"https://github.com/advisories/GHSA-7cff-f24g-qx9x"}],"sources":{"cve":[{"id":"CVE-2026-1819","title":"Stored XSS in Karel Electronics' ViPort","description":"Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Karel Electronics Industry and Trade Inc. ViPort allows Stored XSS.\n\nThis issue affects ViPort: through 23012026.","status":"published","published":"2026-02-04T07:52:23.436Z","modified":"2026-06-06T07:55:39.333Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:20:01.271368Z"}],"euvd":[{"id":"EUVD-2026-5429","description":"Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Karel Electronics Industry and Trade Inc. ViPort allows Stored XSS.\n\nThis issue affects ViPort: through 23012026.","status":"published","published":"2026-02-04T07:52:23Z","modified":"2026-06-06T07:55:39Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T18:20:49.780813Z"}],"ghsa":[{"id":"GHSA-7cff-f24g-qx9x","title":"Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')...","description":"Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Karel Electronics Industry and Trade Inc. ViPort allows Stored XSS.This issue affects ViPort: through 23012026.","status":"published","published":"2026-02-04T09:30:28Z","modified":"2026-06-06T09:31:15Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:08:37.384572Z"}],"nvd":[{"id":"CVE-2026-1819","description":"Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Karel Electronics Industry and Trade Inc. ViPort allows Stored XSS.\n\nThis issue affects ViPort: through 23012026.","status":"published","published":"2026-02-04T08:16:06.82Z","modified":"2026-06-17T10:16:33.987Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:12:05.149641Z"}]}}